# Vulnerabilities published in 2025


- [MAL-2025-40226](https://insights.sbomify.com/MAL-2025-40226/): Malicious code in yankee-6g4-project (npm) (malicious package)
- [MAL-2025-40225](https://insights.sbomify.com/MAL-2025-40225/): Malicious code in yankee-4n3-project (npm) (malicious package)
- [MAL-2025-40224](https://insights.sbomify.com/MAL-2025-40224/): Malicious code in yankee-49u-project (npm) (malicious package)
- [MAL-2025-40223](https://insights.sbomify.com/MAL-2025-40223/): Malicious code in yankee-3iv-project (npm) (malicious package)
- [MAL-2025-40222](https://insights.sbomify.com/MAL-2025-40222/): Malicious code in yangkuan (npm) (malicious package)
- [MAL-2025-40221](https://insights.sbomify.com/MAL-2025-40221/): Malicious code in yandex-useragent (npm) (malicious package)
- [MAL-2025-40220](https://insights.sbomify.com/MAL-2025-40220/): Malicious code in yandex-services (npm) (malicious package)
- [MAL-2025-4022](https://insights.sbomify.com/MAL-2025-4022/): Malicious code in shopify-variants (npm) (malicious package)
- [MAL-2025-40219](https://insights.sbomify.com/MAL-2025-40219/): Malicious code in yandex-printf (npm) (malicious package)
- [MAL-2025-40218](https://insights.sbomify.com/MAL-2025-40218/): Malicious code in yandex-mailer (npm) (malicious package)
- [MAL-2025-40217](https://insights.sbomify.com/MAL-2025-40217/): Malicious code in yandex-logger (npm) (malicious package)
- [MAL-2025-40216](https://insights.sbomify.com/MAL-2025-40216/): Malicious code in yandex-lint-draft (npm) (malicious package)
- [MAL-2025-40215](https://insights.sbomify.com/MAL-2025-40215/): Malicious code in yandex-geo-utils (npm) (malicious package)
- [MAL-2025-40214](https://insights.sbomify.com/MAL-2025-40214/): Malicious code in yandex-environment (npm) (malicious package)
- [MAL-2025-40213](https://insights.sbomify.com/MAL-2025-40213/): Malicious code in yandex-config (npm) (malicious package)
- [MAL-2025-40212](https://insights.sbomify.com/MAL-2025-40212/): Malicious code in yandex-clck-url (npm) (malicious package)
- [MAL-2025-40211](https://insights.sbomify.com/MAL-2025-40211/): Malicious code in yandex-app-config (npm) (malicious package)
- [MAL-2025-40210](https://insights.sbomify.com/MAL-2025-40210/): Malicious code in yamsafer-ui (npm) (malicious package)
- [MAL-2025-4021](https://insights.sbomify.com/MAL-2025-4021/): Malicious code in secure-data-checker (npm) (malicious package)
- [MAL-2025-40209](https://insights.sbomify.com/MAL-2025-40209/): Malicious code in yamsafer-ufo (npm) (malicious package)
- [MAL-2025-40208](https://insights.sbomify.com/MAL-2025-40208/): Malicious code in yamsafer-tooltip (npm) (malicious package)
- [MAL-2025-40207](https://insights.sbomify.com/MAL-2025-40207/): Malicious code in yamsafer-link (npm) (malicious package)
- [MAL-2025-40206](https://insights.sbomify.com/MAL-2025-40206/): Malicious code in yamsafer-bubble (npm) (malicious package)
- [MAL-2025-40205](https://insights.sbomify.com/MAL-2025-40205/): Malicious code in yammerer (npm) (malicious package)
- [MAL-2025-40204](https://insights.sbomify.com/MAL-2025-40204/): Malicious code in yaml-psi-tau-void-quick (npm) (malicious package)
- [MAL-2025-40203](https://insights.sbomify.com/MAL-2025-40203/): Malicious code in yaml-perseus-gridsome-style-loader (npm) (malicious package)
- [MAL-2025-40202](https://insights.sbomify.com/MAL-2025-40202/): Malicious code in yaml-module-throw-compile-gamma (npm) (malicious package)
- [MAL-2025-40201](https://insights.sbomify.com/MAL-2025-40201/): Malicious code in yaml-info-cache-kernel-protected (npm) (malicious package)
- [MAL-2025-40200](https://insights.sbomify.com/MAL-2025-40200/): Malicious code in yaml-figures-javascript-webdriver-manager (npm) (malicious package)
- [MAL-2025-4020](https://insights.sbomify.com/MAL-2025-4020/): Malicious code in seaborn (npm) (malicious package)
- [MAL-2025-402](https://insights.sbomify.com/MAL-2025-402/): Malicious code in bookingcom-oauth (npm) (malicious package)
- [MAL-2025-40199](https://insights.sbomify.com/MAL-2025-40199/): Malicious code in yaml-carina-transport-concurrently (npm) (malicious package)
- [MAL-2025-40198](https://insights.sbomify.com/MAL-2025-40198/): Malicious code in yaml-avior-sync-csrf (npm) (malicious package)
- [MAL-2025-40197](https://insights.sbomify.com/MAL-2025-40197/): Malicious code in yamdrok (npm) (malicious package)
- [MAL-2025-40196](https://insights.sbomify.com/MAL-2025-40196/): Malicious code in yambean-volcano-gr8v (npm) (malicious package)
- [MAL-2025-40195](https://insights.sbomify.com/MAL-2025-40195/): Malicious code in yambean-vinegar-b1kg (npm) (malicious package)
- [MAL-2025-40194](https://insights.sbomify.com/MAL-2025-40194/): Malicious code in yambean-mushroom-qtt0 (npm) (malicious package)
- [MAL-2025-40193](https://insights.sbomify.com/MAL-2025-40193/): Malicious code in yambean-lettuce-udda (npm) (malicious package)
- [MAL-2025-40192](https://insights.sbomify.com/MAL-2025-40192/): Malicious code in yambean-fig-1end (npm) (malicious package)
- [MAL-2025-40191](https://insights.sbomify.com/MAL-2025-40191/): Malicious code in yam-zulu-quebec-ecblf (npm) (malicious package)
- [MAL-2025-40190](https://insights.sbomify.com/MAL-2025-40190/): Malicious code in yam-zucchini-jjne (npm) (malicious package)
- [MAL-2025-4019](https://insights.sbomify.com/MAL-2025-4019/): Malicious code in sc5 (npm) (malicious package)
- [MAL-2025-40189](https://insights.sbomify.com/MAL-2025-40189/): Malicious code in yam-yankee-yvpp (npm) (malicious package)
- [MAL-2025-40188](https://insights.sbomify.com/MAL-2025-40188/): Malicious code in yam-xray-utaz (npm) (malicious package)
- [MAL-2025-40187](https://insights.sbomify.com/MAL-2025-40187/): Malicious code in yam-x99-project (npm) (malicious package)
- [MAL-2025-40186](https://insights.sbomify.com/MAL-2025-40186/): Malicious code in yam-wsf-project (npm) (malicious package)
- [MAL-2025-40185](https://insights.sbomify.com/MAL-2025-40185/): Malicious code in yam-whiskey-bravo-odgrw (npm) (malicious package)
- [MAL-2025-40184](https://insights.sbomify.com/MAL-2025-40184/): Malicious code in yam-whiskey-banana-ccpne (npm) (malicious package)
- [MAL-2025-40183](https://insights.sbomify.com/MAL-2025-40183/): Malicious code in yam-wee-project (npm) (malicious package)
- [MAL-2025-40182](https://insights.sbomify.com/MAL-2025-40182/): Malicious code in yam-victor-xysm (npm) (malicious package)
- [MAL-2025-40181](https://insights.sbomify.com/MAL-2025-40181/): Malicious code in yam-vanilla-delta-ypkec (npm) (malicious package)
- [MAL-2025-40180](https://insights.sbomify.com/MAL-2025-40180/): Malicious code in yam-uqz-project (npm) (malicious package)
- [MAL-2025-4018](https://insights.sbomify.com/MAL-2025-4018/): Malicious code in say-hello-npm-world (npm) (malicious package)
- [MAL-2025-40179](https://insights.sbomify.com/MAL-2025-40179/): Malicious code in yam-ugli-whiskey-xdspy (npm) (malicious package)
- [MAL-2025-40178](https://insights.sbomify.com/MAL-2025-40178/): Malicious code in yam-ugli-juliet-xayok (npm) (malicious package)
- [MAL-2025-40177](https://insights.sbomify.com/MAL-2025-40177/): Malicious code in yam-t3q-project (npm) (malicious package)
- [MAL-2025-40176](https://insights.sbomify.com/MAL-2025-40176/): Malicious code in yam-strawberry-hotel-swtak (npm) (malicious package)
- [MAL-2025-40175](https://insights.sbomify.com/MAL-2025-40175/): Malicious code in yam-strawberry-delta-ohwhr (npm) (malicious package)
- [MAL-2025-40174](https://insights.sbomify.com/MAL-2025-40174/): Malicious code in yam-s5i-project (npm) (malicious package)
- [MAL-2025-40173](https://insights.sbomify.com/MAL-2025-40173/): Malicious code in yam-ryy-project (npm) (malicious package)
- [MAL-2025-40172](https://insights.sbomify.com/MAL-2025-40172/): Malicious code in yam-quince-juliet-rzpul (npm) (malicious package)
- [MAL-2025-40171](https://insights.sbomify.com/MAL-2025-40171/): Malicious code in yam-pulsar-uct5 (npm) (malicious package)
- [MAL-2025-40170](https://insights.sbomify.com/MAL-2025-40170/): Malicious code in yam-oi8-project (npm) (malicious package)
- [MAL-2025-4017](https://insights.sbomify.com/MAL-2025-4017/): Malicious code in safe-array-push (npm) (malicious package)
- [MAL-2025-40169](https://insights.sbomify.com/MAL-2025-40169/): Malicious code in yam-nectarine-whqd (npm) (malicious package)
- [MAL-2025-40168](https://insights.sbomify.com/MAL-2025-40168/): Malicious code in yam-n11-project (npm) (malicious package)
- [MAL-2025-40167](https://insights.sbomify.com/MAL-2025-40167/): Malicious code in yam-myi-project (npm) (malicious package)
- [MAL-2025-40166](https://insights.sbomify.com/MAL-2025-40166/): Malicious code in yam-mmi-project (npm) (malicious package)
- [MAL-2025-40165](https://insights.sbomify.com/MAL-2025-40165/): Malicious code in yam-mike-cswv (npm) (malicious package)
- [MAL-2025-40164](https://insights.sbomify.com/MAL-2025-40164/): Malicious code in yam-meteor-y4re (npm) (malicious package)
- [MAL-2025-40163](https://insights.sbomify.com/MAL-2025-40163/): Malicious code in yam-m80-project (npm) (malicious package)
- [MAL-2025-40162](https://insights.sbomify.com/MAL-2025-40162/): Malicious code in yam-lima-iksj (npm) (malicious package)
- [MAL-2025-40161](https://insights.sbomify.com/MAL-2025-40161/): Malicious code in yam-lima-gzja (npm) (malicious package)
- [MAL-2025-40160](https://insights.sbomify.com/MAL-2025-40160/): Malicious code in yam-kiwi-ouqk (npm) (malicious package)
- [MAL-2025-4016](https://insights.sbomify.com/MAL-2025-4016/): Malicious code in rpc-tools (npm) (malicious package)
- [MAL-2025-40159](https://insights.sbomify.com/MAL-2025-40159/): Malicious code in yam-kiwi-lemon-ystye (npm) (malicious package)
- [MAL-2025-40158](https://insights.sbomify.com/MAL-2025-40158/): Malicious code in yam-juliet-wfie (npm) (malicious package)
- [MAL-2025-40157](https://insights.sbomify.com/MAL-2025-40157/): Malicious code in yam-inferno-9o19 (npm) (malicious package)
- [MAL-2025-40156](https://insights.sbomify.com/MAL-2025-40156/): Malicious code in yam-golf-foxtrot-irkji (npm) (malicious package)
- [MAL-2025-40155](https://insights.sbomify.com/MAL-2025-40155/): Malicious code in yam-foxtrot-yqfa (npm) (malicious package)
- [MAL-2025-40154](https://insights.sbomify.com/MAL-2025-40154/): Malicious code in yam-foxtrot-alpha-cuucv (npm) (malicious package)
- [MAL-2025-40153](https://insights.sbomify.com/MAL-2025-40153/): Malicious code in yam-fnk-project (npm) (malicious package)
- [MAL-2025-40152](https://insights.sbomify.com/MAL-2025-40152/): Malicious code in yam-elderberry-fig-jairj (npm) (malicious package)
- [MAL-2025-40151](https://insights.sbomify.com/MAL-2025-40151/): Malicious code in yam-echo-zzfo (npm) (malicious package)
- [MAL-2025-40150](https://insights.sbomify.com/MAL-2025-40150/): Malicious code in yam-delta-ufgk (npm) (malicious package)
- [MAL-2025-4015](https://insights.sbomify.com/MAL-2025-4015/): Malicious code in reactbootstraps (npm) (malicious package)
- [MAL-2025-40149](https://insights.sbomify.com/MAL-2025-40149/): Malicious code in yam-delta-ivqo (npm) (malicious package)
- [MAL-2025-40148](https://insights.sbomify.com/MAL-2025-40148/): Malicious code in yam-date-juliet-scgxn (npm) (malicious package)
- [MAL-2025-40147](https://insights.sbomify.com/MAL-2025-40147/): Malicious code in yam-cherry-ugli-uanpi (npm) (malicious package)
- [MAL-2025-40146](https://insights.sbomify.com/MAL-2025-40146/): Malicious code in yam-cherry-qdud (npm) (malicious package)
- [MAL-2025-40145](https://insights.sbomify.com/MAL-2025-40145/): Malicious code in yam-cherry-lfhb (npm) (malicious package)
- [MAL-2025-40144](https://insights.sbomify.com/MAL-2025-40144/): Malicious code in yam-cherry-hzqy (npm) (malicious package)
- [MAL-2025-40143](https://insights.sbomify.com/MAL-2025-40143/): Malicious code in yam-bravo-hotel-xfqlc (npm) (malicious package)
- [MAL-2025-40142](https://insights.sbomify.com/MAL-2025-40142/): Malicious code in yam-b3m-project (npm) (malicious package)
- [MAL-2025-40141](https://insights.sbomify.com/MAL-2025-40141/): Malicious code in yam-aon-project (npm) (malicious package)
- [MAL-2025-40140](https://insights.sbomify.com/MAL-2025-40140/): Malicious code in yam-alpha-qwjo (npm) (malicious package)
- [MAL-2025-4014](https://insights.sbomify.com/MAL-2025-4014/): Malicious code in postcss-optimizer (npm) (malicious package)
- [MAL-2025-40139](https://insights.sbomify.com/MAL-2025-40139/): Malicious code in yam-alpha-echo-xqtph (npm) (malicious package)
- [MAL-2025-40138](https://insights.sbomify.com/MAL-2025-40138/): Malicious code in yam-8b9-project (npm) (malicious package)
- [MAL-2025-40137](https://insights.sbomify.com/MAL-2025-40137/): Malicious code in yam-6dm-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/667/